Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HRL6SLqSVrVprS0Ggq1cXUqy6HM.roa
File: HRL6SLqSVrVprS0Ggq1cXUqy6HM.roa (raw, json)
Hash identifier: UIWEpW1Iybag6m5kVNMxpEhyVaWT2CW02eP45/NRgQU=
Subject key identifier: 1D:12:FA:48:BA:92:56:B5:69:AD:2D:06:82:AD:5C:5D:4A:B2:E8:73
Certificate issuer: /CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Certificate serial: 0183C7411F77A7185FA75AACF33487B618F6
Authority key identifier: 6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HRL6SLqSVrVprS0Ggq1cXUqy6HM.roa
Signing time: Tue 11 Oct 2022 13:34:37 +0000
ROA not before: Tue 11 Oct 2022 13:34:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200019
IP address blocks: 141.11.178.0/24 maxlen: 24
141.11.200.0/22 maxlen: 24
141.11.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:41:1f:77:a7:18:5f:a7:5a:ac:f3:34:87:b6:18:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4c7986b182ecc36ad74c535beae7299b35ce92
Validity
Not Before: Oct 11 13:34:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1d12fa48ba9256b569ad2d0682ad5c5d4ab2e873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4d:16:75:fd:7a:9a:54:c3:f3:3b:fb:9a:89:
be:43:ff:f4:b1:8f:40:9e:12:78:b0:26:67:ac:30:
7d:f1:bd:83:33:23:ae:e7:6f:61:26:11:7c:ec:22:
57:14:10:51:3f:81:f9:67:76:43:63:a3:01:3e:0d:
1d:e5:40:c3:5d:b8:38:93:97:a5:73:fc:e3:c9:b5:
95:a2:e7:b5:ad:cb:35:9e:2e:af:af:16:5e:57:16:
23:82:f8:78:2c:ac:d9:1e:27:16:55:26:8e:f1:22:
46:14:00:1c:51:f3:7d:51:2f:09:2a:78:b8:7d:91:
0c:3e:28:51:98:74:16:5b:24:84:6b:47:65:a7:33:
98:39:b4:78:ac:67:ea:28:13:13:70:ab:99:53:e9:
04:33:f4:ce:80:de:f5:f3:82:52:c8:7c:0b:06:b0:
9d:82:56:07:a5:e8:13:c7:d7:b1:af:37:25:c2:7e:
10:23:73:63:c5:c8:de:86:66:45:f3:68:03:be:42:
49:07:1f:4e:57:f1:dd:77:2a:37:e5:33:0a:9d:89:
6e:42:80:7d:c5:0f:5a:a4:9e:21:22:4a:40:fa:7e:
d4:d5:d7:bd:56:9b:48:d0:a4:b1:d8:54:45:82:09:
b1:dd:c7:c3:e8:87:f3:8a:91:81:3f:3d:73:0d:13:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:12:FA:48:BA:92:56:B5:69:AD:2D:06:82:AD:5C:5D:4A:B2:E8:73
X509v3 Authority Key Identifier:
keyid:6C:4C:79:86:B1:82:EC:C3:6A:D7:4C:53:5B:EA:E7:29:9B:35:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEx5hrGC7MNq10xTW-rnKZs1zpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/HRL6SLqSVrVprS0Ggq1cXUqy6HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/c4e5ca-8aa5-4e64-a022-26ca148d07af/1/bEx5hrGC7MNq10xTW-rnKZs1zpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.11.140.0/22
141.11.178.0/24
141.11.200.0/22
Signature Algorithm: sha256WithRSAEncryption
29:c3:18:9a:5e:fc:c7:f7:98:69:c8:d4:57:95:a0:2c:65:35:
42:41:2c:36:48:a7:d6:9e:ab:65:07:2b:0b:c1:44:9b:95:d7:
65:a3:24:e6:32:d2:d9:41:df:29:22:ed:cd:e0:9a:9e:a5:44:
a8:46:e2:5a:13:b0:9e:b3:68:af:77:be:da:6e:86:f9:2e:6d:
c0:33:a7:ad:a8:27:d3:22:e9:bc:c0:02:54:2e:09:55:e1:e2:
3d:46:01:11:7c:2e:e1:bd:12:5c:10:8a:e0:1a:5a:f6:40:82:
82:b5:6e:49:f6:e5:ad:03:f5:28:97:ea:3f:ec:9d:1e:09:fd:
22:58:c9:0f:15:26:b3:1b:07:42:f0:69:d3:c8:97:ed:2e:8c:
ed:80:9f:97:32:cb:b3:c8:df:e8:d0:80:c1:97:3d:e1:6e:a3:
db:56:77:32:c2:d0:32:bc:42:27:73:b8:03:40:b5:ef:de:aa:
b6:68:bc:ef:e1:db:86:e2:53:c4:58:e6:bf:78:11:56:09:4a:
c5:b7:d6:7d:ad:fb:c6:17:05:ca:30:6d:27:f0:ae:eb:6c:4b:
6e:fb:c4:e1:f1:e1:93:0a:1a:72:aa:42:ba:53:54:25:af:fc:
51:73:ac:59:2a:ba:05:2d:1d:8d:07:b9:e7:60:99:7c:f4:6b:
6a:8a:0d:b0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYPHQR93pxhfp1qs8zSHthj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNGM3OTg2YjE4MmVjYzM2YWQ3NGM1MzViZWFlNzI5OWIz
NWNlOTIwHhcNMjIxMDExMTMzNDM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDEyZmE0OGJhOTI1NmI1NjlhZDJkMDY4MmFkNWM1ZDRhYjJlODczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U0Wdf16mlTD8zv7mom+Q//0sY9A
nhJ4sCZnrDB98b2DMyOu529hJhF87CJXFBBRP4H5Z3ZDY6MBPg0d5UDDXbg4k5el
c/zjybWVoue1rcs1ni6vrxZeVxYjgvh4LKzZHicWVSaO8SJGFAAcUfN9US8JKni4
fZEMPihRmHQWWySEa0dlpzOYObR4rGfqKBMTcKuZU+kEM/TOgN7184JSyHwLBrCd
glYHpegTx9exrzclwn4QI3NjxcjehmZF82gDvkJJBx9OV/Hddyo35TMKnYluQoB9
xQ9apJ4hIkpA+n7U1de9VptI0KSx2FRFggmx3cfD6IfzipGBPz1zDRNINQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB0S+ki6kla1aa0tBoKtXF1KsuhzMB8GA1UdIwQY
MBaAFGxMeYaxguzDatdMU1vq5ymbNc6SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjIt
MjZjYTE0OGQwN2FmLzEvSFJMNlNMcVNWclZwclMwR2dxMWNYVXF5NkhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jNGU1Y2EtOGFhNS00ZTY0LWEwMjItMjZjYTE0OGQwN2Fm
LzEvYkV4NWhyR0M3TU5xMTB4VFctcm5LWnMxenBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCjQuMAwQA
jQuyAwQCjQvIMA0GCSqGSIb3DQEBCwUAA4IBAQApwxiaXvzH95hpyNRXlaAsZTVC
QSw2SKfWnqtlBysLwUSblddloyTmMtLZQd8pIu3N4JqepUSoRuJaE7Ces2ivd77a
bob5Lm3AM6etqCfTIum8wAJULglV4eI9RgERfC7hvRJcEIrgGlr2QIKCtW5J9uWt
A/Uol+o/7J0eCf0iWMkPFSazGwdC8GnTyJftLoztgJ+XMsuzyN/o0IDBlz3hbqPb
VncywtAyvEInc7gDQLXv3qq2aLzv4duG4lPEWOa/eBFWCUrFt9Z9rfvGFwXKMG0n
8K7rbEtu+8Th8eGTChpyqkK6U1Qlr/xRc6xZKroFLR2NB7nnYJl89Gtqig2w
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:49 2025 by rpki-client